Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ECFB1CA00AE911ECA769D611C4F9AE02.roa
File:                     ECFB1CA00AE911ECA769D611C4F9AE02.roa (raw, json)
Hash identifier:          t6WG3QP2OmguEPc+ueuu1vshd61CbJB/Nt9U9ta+3Sc=
Subject key identifier:   C0:E0:54:19:03:7A:72:86:72:0A:D6:27:11:B4:CA:CA:05:AE:6F:72
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3EA4
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ECFB1CA00AE911ECA769D611C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:42:15 +0000
ROA not before:           Tue 12 Sep 2023 02:42:15 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     140824
IP address blocks:        103.172.60.0/23 maxlen: 24
                          2407:cbc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16036 (0x3ea4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:42:15 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd007-875f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:20:f7:d4:18:ac:ee:82:15:93:85:65:b2:
                    70:eb:22:2c:29:14:f6:59:92:65:a6:9f:d1:af:1f:
                    71:8a:f7:bb:25:86:76:5b:4b:4f:6e:32:c3:00:17:
                    3a:72:c9:75:f2:52:48:1f:43:7e:7b:5c:7a:06:28:
                    03:78:af:5c:a4:c2:58:bc:d2:8d:dd:cf:b3:2c:c9:
                    a0:18:f8:21:38:ab:2e:b2:bb:2f:5c:f7:d6:7b:54:
                    e0:48:5c:c6:50:d4:ba:0c:68:b0:3b:8e:4d:11:1a:
                    2b:85:f1:5d:b9:a3:c1:23:fa:32:5f:07:37:d8:e9:
                    20:06:59:c7:08:df:91:4c:8c:bc:a5:9d:8e:d9:64:
                    0a:4d:84:2a:3e:3a:60:16:77:ce:e9:3f:3b:3f:e3:
                    05:90:96:05:13:80:2c:cd:d3:a1:4b:82:8d:60:34:
                    ac:fc:78:71:18:96:60:b5:fb:77:ab:a1:dd:0d:2f:
                    a8:8f:3a:74:f7:83:c7:87:df:32:44:d8:43:fe:36:
                    21:e9:f4:af:32:4c:e6:b8:b8:55:a9:e5:4a:d7:f9:
                    96:4d:5c:81:45:a4:ba:ea:84:ab:a9:70:b5:60:60:
                    2e:92:b9:9f:30:93:03:e8:7c:c8:64:f1:75:0f:7a:
                    39:fe:67:ef:d8:34:fc:15:2e:53:a4:97:9e:fa:c3:
                    18:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E0:54:19:03:7A:72:86:72:0A:D6:27:11:B4:CA:CA:05:AE:6F:72
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ECFB1CA00AE911ECA769D611C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.60.0/23
                IPv6:
                  2407:cbc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:67:db:8c:7e:1f:e2:1e:5c:d5:b6:e7:42:42:39:47:da:b4:
         8a:29:6c:4b:a8:25:36:9c:23:31:a4:22:de:76:38:4f:be:66:
         c3:da:1c:db:e9:5f:c4:4e:b3:2e:8d:3e:e4:a6:6f:d2:54:94:
         df:24:58:99:b6:1c:4b:33:fa:51:68:e1:d6:40:53:6b:d4:49:
         95:a1:4c:42:a7:67:6f:2a:82:2f:99:97:0b:a2:f8:5d:0a:e5:
         bf:85:35:8c:e8:77:5d:87:37:5d:53:b9:52:63:3f:16:f3:70:
         84:85:b1:e8:49:b0:de:75:46:2a:fa:b3:9d:84:71:af:d6:a2:
         fe:66:24:da:fd:94:42:a4:e5:aa:64:df:4f:af:2e:9f:ee:39:
         79:53:01:02:2d:58:5a:c7:b0:db:94:6d:46:8a:39:ff:e3:22:
         37:47:1c:f2:54:31:b2:5e:bd:aa:c9:f8:bc:96:fc:7a:e7:a1:
         64:af:52:3d:26:d6:e7:6f:b7:ff:c7:59:5b:fc:16:71:e9:ff:
         93:08:f3:7f:82:bf:27:4b:e6:11:8c:90:48:d3:6f:d9:37:e5:
         68:29:65:eb:0b:9f:58:6e:14:98:cd:e0:14:78:cf:39:60:b9:
         e7:bd:ea:91:e3:bb:ca:84:c3:ca:0d:73:a7:fc:80:57:09:6a:
         01:9e:d7:d4
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICPqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjMwOTEyMDI0MjE1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGZmZDAwNy04NzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0Yg99QYrO6CFZOFZbJw6yIsKRT2WZJlpp/Rrx9xive7JYZ2W0tPbjLDABc6
csl18lJIH0N+e1x6BigDeK9cpMJYvNKN3c+zLMmgGPghOKsusrsvXPfWe1TgSFzG
UNS6DGiwO45NERorhfFduaPBI/oyXwc32OkgBlnHCN+RTIy8pZ2O2WQKTYQqPjpg
FnfO6T87P+MFkJYFE4AszdOhS4KNYDSs/HhxGJZgtft3q6HdDS+ojzp094PHh98y
RNhD/jYh6fSvMkzmuLhVqeVK1/mWTVyBRaS66oSrqXC1YGAukrmfMJMD6HzIZPF1
D3o5/mfv2DT8FS5TpJee+sMYuQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMDgVBkD
enKGcgrWJxG0ysoFrm9yMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRUNGQjFDQTAw
QUU5MTFFQ0E3NjlENjExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnrDwwDwQCAAIwCQMHACQHy8AAADANBgkqhkiG9w0BAQsF
AAOCAQEAEmfbjH4f4h5c1bbnQkI5R9q0iilsS6glNpwjMaQi3nY4T75mw9oc2+lf
xE6zLo0+5KZv0lSU3yRYmbYcSzP6UWjh1kBTa9RJlaFMQqdnbyqCL5mXC6L4XQrl
v4U1jOh3XYc3XVO5UmM/FvNwhIWx6Emw3nVGKvqznYRxr9ai/mYk2v2UQqTlqmTf
T68un+45eVMBAi1YWsew25RtRoo5/+MiN0cc8lQxsl69qsn4vJb8euehZK9SPSbW
52+3/8dZW/wWcen/kwjzf4K/J0vmEYyQSNNv2TflaCll6wufWG4UmM3gFHjPOWC5
573qkeO7yoTDyg1zp/yAVwlqAZ7X1A==
-----END CERTIFICATE-----
Generated at Fri May 31 16:41:41 2024 by rpki-client on console-ams.rpki-client.org